Cisco/Level3 takedown

Steve Noble snoble at
Thu Apr 9 16:31:33 UTC 2015

I was wondering why a non-allocated AS was being allowed to announce the
blocks but it appears that APNIC has revoked the 63854 ASN?

Based on google's cache, it was still there late March.

BGP routing table entry for, version 108425142
Paths: (1 available, best #1, table default)
Not advertised to any peer
6939 4134 36678 26484 63854

Blake Hudson wrote:
> Reading the article, I assumed that perhaps Level 3 was an upstream
> carrier, but RIPE stats shows that the covering prefix
> ( is announced by AS63509, an Indonesian organization.
> It looks like they're fighting back by announcing their own /24 now.
> I love the AS's address:
> descr:Jl. Marcedes Bens No.258
> descr:Gunung Putri, Bogor
> descr:Jawa Barat 16964
> country:ID
> While a Level 3 /24 announcement will certainly have a world wide
> impact, I agree that it seems misguided when the originating AS can
> announce their own /24. It does make one wonder why Cisco or Level 3
> is involved, why they feel they have the authority to hijack someone
> else's IP space, and why they didn't go through law enforcement. This
> is especially true for the second netblock (,
> announced by a US company (AS26484).
> --Blake

More information about the NANOG mailing list